Privacy Policy

1. Introduction

ScanFix ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our code analysis service.

Please read this privacy policy carefully. If you do not agree with the terms of this privacy policy, please do not access the service.

2. Information We Collect

2.1 Personal Information

We collect personal information that you voluntarily provide when you:

• Register for an account (name, email address)
• Connect your GitHub account (GitHub username, profile information)
• Make a payment (billing information, processed securely via Stripe)
• Contact our support team (correspondence, support tickets)

2.2 Repository Data

When you authorize us to access your GitHub repositories, we collect:

• Repository names, descriptions, and metadata
• Source code files for analysis purposes
• Repository statistics (languages, file count, etc.)
• Analysis results and identified issues

Important: We only access repositories you explicitly select for analysis. Your source code is processed temporarily for analysis and is not permanently stored on our servers.

2.3 Automatically Collected Information

We automatically collect certain information when you use our Service:

• Log data (IP address, browser type, pages visited)
• Device information (device type, operating system)
• Usage data (features used, analysis requests)
• Cookies and similar tracking technologies

3. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain our Service
• Analyze your code repositories for bugs, security issues, and performance problems
• Generate health reports and recommendations
• Process your payments and manage subscriptions
• Send you technical notices, updates, and support messages
• Respond to your comments, questions, and customer service requests
• Improve and optimize our Service
• Monitor and analyze usage patterns and trends
• Detect, prevent, and address technical issues and security vulnerabilities

4. Data Storage and Security

4.1 Source Code Handling

4.2 Security Measures

We implement appropriate technical and organizational security measures:

• 256-bit SSL encryption for data in transit
• Encrypted storage for sensitive data at rest
• Regular security audits and penetration testing
• Access controls and authentication mechanisms
• Automated backup systems
• Monitoring for suspicious activity

5. Information Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share information in the following circumstances:

5.1 Service Providers

We may share information with third-party service providers who perform services on our behalf:

• Payment processing (Stripe)
• Cloud infrastructure (hosting providers)
• Analytics services
• Customer support tools

5.2 Legal Requirements

We may disclose your information if required to do so by law or in response to valid requests by public authorities.

5.3 Business Transfers

If we are involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.

6. Your Data Rights

You have the following rights regarding your personal data:

• Access: Request a copy of your personal data
• Correction: Request correction of inaccurate data
• Deletion: Request deletion of your account and data
• Data Portability: Request your data in a structured format
• Objection: Object to processing of your data
• Restriction: Request restriction of processing

To exercise these rights, please contact us at privacy@scanfix.ai

7. Data Retention

We retain your information for different periods depending on the type of data:

• Account Information: Until you delete your account
• Analysis Results: For the duration of your subscription
• Source Code: Deleted immediately after analysis
• Payment Information: As required by law and accounting standards
• Logs and Analytics: Typically 90 days

8. Cookies and Tracking

We use cookies and similar tracking technologies to:

• Maintain your session and authentication
• Remember your preferences
• Analyze usage patterns
• Improve user experience

You can control cookies through your browser settings. Disabling cookies may limit functionality.

9. Third-Party Services

Our Service integrates with third-party services:

• GitHub: For repository access and authentication
• Google: For optional Google Sign-In
• Stripe: For payment processing

These services have their own privacy policies. We recommend reviewing them.

10. International Data Transfers

Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place to protect your data in accordance with this Privacy Policy and applicable laws.

11. Children's Privacy

Our Service is not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If you become aware that a child has provided us with personal information, please contact us.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by:

• Posting the new Privacy Policy on this page
• Updating the "Last updated" date
• Sending you an email notification for material changes

13. Contact Us

If you have questions or concerns about this Privacy Policy, please contact us: